Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
23/05/2024, 19:36
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-23_bfac6e7b8d56e5f2c8557d1038c531cf_bkransomware_karagany.exe
Resource
win7-20240508-en
General
-
Target
2024-05-23_bfac6e7b8d56e5f2c8557d1038c531cf_bkransomware_karagany.exe
-
Size
1.5MB
-
MD5
bfac6e7b8d56e5f2c8557d1038c531cf
-
SHA1
7c44dc04172a643fd7ba0e3b48eb5cd7af9c0ce2
-
SHA256
5d66f0206bd0c28e2e1fc844e15549bda9592796886417025356d6c0c914f573
-
SHA512
bdfafac25018758e195f0e15e5c782121a2253267621cbe76d1543a4e98a3e2e066c5f3ffe6a18490544114bd35200aed8e84b2e217972f2a181a3bbcc23cb46
-
SSDEEP
24576:Tk1H8NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:Tk1HgDUYmvFur31yAipQCtXxc0H
Malware Config
Signatures
-
Executes dropped EXE 6 IoCs
pid Process 2164 alg.exe 3252 DiagnosticsHub.StandardCollector.Service.exe 752 elevation_service.exe 1900 elevation_service.exe 3572 maintenanceservice.exe 1012 OSE.EXE -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 9 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 2024-05-23_bfac6e7b8d56e5f2c8557d1038c531cf_bkransomware_karagany.exe File opened for modification C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe 2024-05-23_bfac6e7b8d56e5f2c8557d1038c531cf_bkransomware_karagany.exe File opened for modification C:\Windows\system32\AppVClient.exe alg.exe File opened for modification C:\Windows\system32\dllhost.exe alg.exe File opened for modification C:\Windows\system32\dllhost.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\system32\AppVClient.exe 2024-05-23_bfac6e7b8d56e5f2c8557d1038c531cf_bkransomware_karagany.exe File opened for modification C:\Windows\system32\dllhost.exe 2024-05-23_bfac6e7b8d56e5f2c8557d1038c531cf_bkransomware_karagany.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\1770698e92be0f3e.bin alg.exe File opened for modification C:\Windows\system32\AppVClient.exe DiagnosticsHub.StandardCollector.Service.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_91015\javaw.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmic.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javac.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\kinit.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\policytool.exe alg.exe File opened for modification C:\Program Files\7-Zip\7zG.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jstat.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Google\Chrome\Application\chrome_proxy.exe alg.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ieinstal.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javap.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javapackager.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\unpack200.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ExtExport.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE alg.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\notification_helper.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\arh.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe alg.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\chrome_pwa_launcher.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\klist.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\default-browser-agent.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\jp2launcher.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\unpack200.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\crashreporter.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jconsole.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Browser\WCChromeExtn\WCChromeNativeMessagingHost.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\servertool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\jjs.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jjs.exe alg.exe File opened for modification C:\Program Files\VideoLAN\VLC\vlc.exe alg.exe File opened for modification C:\Program Files\Internet Explorer\ielowutil.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jdb.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jdeps.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdate.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\unpack200.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\110.0.5481.104\chrome_installer.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateOnDemand.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\dotnet\dotnet.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jmap.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\policytool.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdate.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javaw.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\MSInfo\msinfo32.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\orbd.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroTextExtractor.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\FullTrustNotifier.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\java.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javah.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jdb.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe alg.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 3252 DiagnosticsHub.StandardCollector.Service.exe 3252 DiagnosticsHub.StandardCollector.Service.exe 3252 DiagnosticsHub.StandardCollector.Service.exe 3252 DiagnosticsHub.StandardCollector.Service.exe 3252 DiagnosticsHub.StandardCollector.Service.exe 3252 DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: LoadsDriver 2 IoCs
pid Process 656 Process not Found 656 Process not Found -
Suspicious use of AdjustPrivilegeToken 5 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 4724 2024-05-23_bfac6e7b8d56e5f2c8557d1038c531cf_bkransomware_karagany.exe Token: SeDebugPrivilege 2164 alg.exe Token: SeDebugPrivilege 2164 alg.exe Token: SeDebugPrivilege 2164 alg.exe Token: SeDebugPrivilege 3252 DiagnosticsHub.StandardCollector.Service.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-23_bfac6e7b8d56e5f2c8557d1038c531cf_bkransomware_karagany.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-23_bfac6e7b8d56e5f2c8557d1038c531cf_bkransomware_karagany.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
PID:4724
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
PID:2164
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:3252
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
PID:752
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
PID:1900
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
PID:3572
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
PID:1012
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD5d90871393163565548f27264df499182
SHA1ebc39a0b162b487828b05e09393c892113c6f0ea
SHA25647936d00cba7abcc84fad4033bbec27d88815c9bc22c4803baed40e4c3979c70
SHA512ee979e60f8c92b15cf72d620b6f8e673144be306c7d86151e94b94a229a083e60031131bae912cee0fdf20758987acef8188be1d219b2b74aa33f973b80c20e9
-
Filesize
1.7MB
MD5442e8ffea2088f65d00a3009fad11b6b
SHA1fb2cd211ab4bf73330bdb708f6d1079b696d59e0
SHA2562846eea566da97822465461352bc781ab12df0b6493ae8b5df6b5efa25fa7865
SHA512256389b7f4d36733359bef7e9ab66a69018e0ccacfb63532d5bc972108fe189f37690510c3ff5059cdd6db11f559f2fd37f6cb9165230f0ab2c918bef62fd134
-
Filesize
2.0MB
MD5058118d9ce7e3ca3fe807b8c763ef200
SHA194880d568db00c995846fc65ce2e69a2b95e2bd5
SHA256342bf3144e932575734b125f5f85890aebfc3eadc3c212befe9cdfe83567831c
SHA5122f87425b04561faf86db505797894fb6d1197fc6611e18c1c102bb8e0c91f3862bcd7e4411b45e0d15154d272dd89397000f940d27107f128f5593ded79936be
-
Filesize
1.5MB
MD51103a3898a310854109eecb3c329f42d
SHA10135698cd47106ddab771261463639511e4008e1
SHA2561724206f073608b3db3d18eb0190af94439d2ad6152cda8772eebceefed2788a
SHA512e563b0e08afe064bc9109a1090d0f8a80f7aa4311dd3f03d46d59ffed443283fa1e04ccf72623ab6b25a162075c63a2feee414dbb9cff832ad6f4f6d4b219638
-
Filesize
1.2MB
MD54af9ef747a20d155e9ffd25a163064ed
SHA1dd4788277256dbb8c80dbeaef6d8e248ef3cfb16
SHA2560e029f55e86fd6fef2b62fda8ae22813d821865537087c185653fd0bf6d0ccc2
SHA51214a37e2c88b2ebf01b9b1fbf68f783e65502b9225146541d43d4d8320bd8e47cfa0dfa7221a11e5ffad61bf78186f85a9d77f2ad4387827b398c657e6bf670a4
-
Filesize
1.4MB
MD5453eb8ec2d5824f5f583909c12ee190f
SHA105adcdba526573ab92d2a4f6a5ef713221902050
SHA2567c8f9d4fb1f8582561cc6faff3901552f8e361177c925cb980a812a90524cc68
SHA5125044aab2f38eb6d7af3fc066844d7c32472bee9a70c651dd239fd6f7dee36288752549838bf352a1c2cc436ea15e95618dc98b2f8b9fb72b25b2fcd1cd81659f
-
Filesize
1.7MB
MD59c445636d789f4a450d2f789de4dea56
SHA172d9abc948a7131ae355831224950459dc3e0c1a
SHA2562000ae739cffbc0811c54c36373e307c51968054215690a24dd6356dce42360d
SHA51205e11ed19fc2b7a4c83edddc7a4deaa7d2226c0886d2f64bfe33f44e9cd21f216d4beedb568aaa59b8df8d263e93da35f7e0094f87fab8a0084a193acbfc7ae5
-
Filesize
4.6MB
MD53e3acdac1b9a9a12d24ca13f690e5d2d
SHA1629cbae13f39c4e48d87a51450c68e1d8ef28468
SHA2563bd6c9596b2c5c0694f2c60540e94c59df96a74a428d79ad7ad35657ea16f471
SHA51208282f3111e8138d4699bc1133a82d3487067a48cb2c3d14d9dd7d1df3f2bf58f723c710022e4fcd420509433f50c22f34110393972c5c447c85fbd5bfaf6185
-
Filesize
1.8MB
MD5c874e37e3c6043302dd8ad8489b6f727
SHA1f0037b393ad263ae814eb8345d8d9e863f65732b
SHA256ba864b418c2d0fd1cfc2ee879618f0b156a8eb70d4d49873c9802a1501421d53
SHA5124799cadbe5c0783efb997cd7777b443856f00baf2d2e5b0b471f3d1364651bbddcf5e651bc4891d9abcf911ba1aa3d8276e572baa937d74f8dac04142c78960a
-
Filesize
24.0MB
MD5a34b5bb59b48e13f468020124f631a97
SHA1f0c4af97ab3cb8deca84f7b48e0a9d999fab8b1a
SHA256c513ad9b32e439176156dc05b91a69b67e07c66e6b6fbc991a2fbd19733081f4
SHA512b65cede2aa53556e88a6dfdc83e99c3a33e998ef618432b6e4fb3365823e47d7f4d966f4b422b0e4535bc361fe55a575db24fce891d822a7d615a7a24c30ca46
-
Filesize
2.7MB
MD592ca65fb99587953fa28bf6184a86163
SHA1cb127eb45dc6c429c829b6d50f295238289a9f29
SHA256ab48b296ce6550a736f66d4fd9dfdeb405f76682e99c01c2ac4c75d67d684f97
SHA512dcecf20cdc50681182173c2027495bb460ed5f66d00e3a2e19062073c66a117f27c6bc43afee54be8ab71ffb027d4f467f9d4122c74809885a5126c7dc18db3e
-
Filesize
1.1MB
MD5baa9d71aac2eb0097612c60191edb50e
SHA117e98cfdb44b221789b2bf58ac72d21bad1bc450
SHA256008618efabb0bb11a4984032d1ce808456e12ea32c99586dc7ce785f62c86f7a
SHA512db026c3763e46452877a655065e762f2677a9281f724c8c0cea156cc26b479871717c6750ed02a67bf6c006f708d35acc6f2611de7b5f60071a993c7683113a3
-
Filesize
1.7MB
MD543251568aca779b3c3d8d5b15af57285
SHA19e55d3540405f79946c2a7c31bf682edfe2aab4e
SHA256736c58bbb4620d932f5601e944751857acd1b0384b8b8e01e5d44233b0cf95ef
SHA51235213cc3afd74e36533fc28bd7de9ba04b8994b3c651210d874caaea5b2d9cadd8009720fbd2933dcf79b157e96abc6534c0b51ec40c2146480ee209ca7cd91c
-
Filesize
1.5MB
MD52624c8d636bac8f8cbf47c289b34146a
SHA12f30aef3e0368cdb671d7a2a0c59b34203c5c827
SHA256d869131e5bb68bf7800e3f87040755d5d05d67210185ceb31dcdac8d0c6eff90
SHA512cba6164f2adf175c0c143893b77fa5f36476d6bd6174abccc2aa0555a299cb50dc8b41136d8657e5041ef6d8cf62bc00c1031e554d5cc2c3781b2c98dd2a26c4
-
Filesize
5.4MB
MD5ff1281bd9d8f5ea4ce565c29778cd1b4
SHA17b0c579c43319681342e2a4b008ce3b3c7b04620
SHA2565adc734198b1d349afdcaa96587bbc5a61a637952ca76b8b041248d47b93b9c0
SHA5122c0917c62d215d981581c98a51a864ca9b98b22d675c70535f89c49b2f513f10f7bccc4459586f7bed26f5a451ed7cb78efd5b6a4f3a0c1f9c3873387562ebf2
-
Filesize
5.4MB
MD50a4c7f78afee6725b9b90fcc6f398d63
SHA12c6b5a3e027907b7310b18563abb82e700a58e93
SHA2567256f9b214c8a7fec1f4aee0f8bad62d789cefd1579a52cff60e24a03e93ea3d
SHA5122c741dc7d5dc36d5bd38dc5715ea7e4b7ef0d6b2a56181ad33ee147258a4b4ad935ff2c06a14cb3780c5af1dc6f81450f59b1611abaec5dfd859184106bced66
-
Filesize
2.0MB
MD5d29113b0b4257e8bd5fa738e5dd4c16b
SHA17c856ae0490b74af6eb9e7128aa9dbaec45fd2ed
SHA256ffa2cb327fbac165791e61f26d92d4c9f42a6bce51d8ee64929c81d6eebb7dde
SHA5125e3970d88d3e5e9c29648d54479a1d2a8d40d7b9077a4d455c7192685f57448bb76c58581c04835d83155869c8f2479a0fc9c532aed5a812499088e8ca42e584
-
Filesize
2.2MB
MD59ca02a5517da5f381ab47b0f18702603
SHA145560e31494c0c6c6132d7fa84d47f99759a5cdd
SHA25649cd1952398b75a0c816055d2dc58ba683ae9815a86345516cf107df4ca61b73
SHA5120292985716dd76f00bac25e9e9ebe6141a1f1c1c17ed66d7386318a31b62d8b616e2810a5cf1cff5c3c344a5d1ff9fb65d96d9fc4f731352f38e744ba5eb4bd9
-
Filesize
1.8MB
MD5456dae34b3aec2fa6513fd49f7eb643e
SHA1b416dacfa80165aab76a5c4c10e8471bad1076a2
SHA2563cdd03cafe04a1af971361c6b5bd2811dbd930bb57767c73a48fdec96c8d2930
SHA5122ed75cc67f42cd49287b5d64b01796e29f273d130954fb835d5302f4a3345184fae5f61cdbacdc1076f834de11ebd11fef29fc194c4b8e6eb1642c800ad01c10
-
Filesize
1.7MB
MD5e31cd3e13f61d896de6a4fe162c14923
SHA1e000074b564c7afcb9133ddd20cb1492642f97b2
SHA25617c448d4fa6424941e3bd48c55a5524ca37b64f21a023cad3fa7cb1afae3fbcf
SHA512df3d8132b90fc99d3ae73d03239e6067bed33c61ae6c8f6fd1a9f2ffce67935188b29fbfa38765bea34c23cf04f84fa96e0b3412856c37ec633e8dc90cd053a0
-
Filesize
1.4MB
MD50a9b4caafdcf202b608d77909c927644
SHA1e1c53ec5328ce3da86378a8d29b82d1ee1eaeaf7
SHA256e523ed3804c67d03785d9d0487d7fbdce7a0bd948e14df19d9eb391e3ac204b2
SHA5129e7ff5389904a4688670446246d217b4a82400301298d3c582fe8f57b94924275bd1638b141a5f7c2f07bb8657a3fb1045b966a08684aa8a2e076ac038a7278d
-
Filesize
1.4MB
MD5c1dce8742ba647ac1c6c3c379cc6f533
SHA10da148745b53a42282966a7530820e524bd30732
SHA256e78534f7869830cfd81049fa4f8d070f2006e739acc050b54cbf2598cb9dc2f1
SHA51294af7d86a8d576a23b95603d81f97d7df87470ef03c63306eb3c7fde055d86e3cd3ba6e17b551627d06f4115a86221268e33bf89ab397e41fe92708b866af6a1
-
Filesize
1.4MB
MD546d9fdcd0d6ac43e6c35b9d6dbeb5e6a
SHA15d33536700a2f7edc3248c7815b060945f06e95b
SHA256ba631f1fe98920b7631ac4c9eb69ca2db9fbe075f2b8e49ad996c29d2d6ac7d1
SHA512d249ec3b1cb65def57bb675bb61e2e9cd7d0d31d76a9fd72f18d8180678c0f742c48eff382b94bd9149c7fa80f785978bd1329287bce55fb9b88cb8fae01a179
-
Filesize
1.5MB
MD5a84ae33f672ca75e3b90918bd0330744
SHA13ce4ca889150a807f1f7401ab88f41ba980c5655
SHA256f4b813c60400920e7b495fc13fa5abe8c8dc1426514105942b200deae06c2e0c
SHA5123bd351bd4af2f2e532429c482103b9ef024d174dee5c527f98b51bbe65910646fc4bfaf90a4ca8c61a9f6a3dff6aedbbee0dfe659342d676802b230b93313e35
-
Filesize
1.4MB
MD5d5d1797bad39d6fba7e1f452c21a170c
SHA121146a46a2f3bdb6423732439293ed5b78f24407
SHA256e9edbf87f453546c1176aa4db1b63eb2e88ee545dc11c35d8aa8fe00bde191c0
SHA5122e86b65cc9e22f0319bb9cb28365c391427e113be7f26bef110ec572a14351dcabf367af8d250cd778e28105b2b3dde605bba38e287c9cdea2b2b1c366beb942
-
Filesize
1.4MB
MD535805fdc4ac54f753c244cd0be6dc746
SHA1554fda05385d7c14a5f233962482fca364bb6a8a
SHA2566e44d6521b819cb979a7d02c133d1db49be42c691ad6f4639f3e69ed75b26d57
SHA5123268ddf556afa560e87abf1694778045b6bbe702a51fc46698717298e38dcd659f3f0f46a11ade739e27b1061401629f96bbcb53c20c517bf0b415c7706289b9
-
Filesize
1.4MB
MD52c2ab65a3709cfa2907dca2f32740083
SHA1dfb9fa4c6a19beef2951223d8935cd972a2f90b3
SHA256f520b39fe9f131d1febd23092f52eaff4d430aa1e70d88a0868adbb0e4cc5f3b
SHA512ef6923756b5afdad1f2a61f45dba6ff0c560961d5151b477e3856994d7d847d65b9c8bfc203cdb5111b16b1deb30cb01b04fec322af1acbaeb058c0bc64ca978
-
Filesize
1.7MB
MD59612ae6ca8c269bb6d15fc54e8733f0a
SHA1139a628688368789d58551ccea5ad98989c3862e
SHA256209a9ad4ec5b38ea8d53e9ac169f98a956a0b69724e59422eceb4a8343d8d8d7
SHA512628283245f99277834e3c7478e0489c42b922de9a6123c60d8a98c3eaf227c4266816b9619f3f5102a2626b5576eae8763c58c60dc09e817cb700ae661c78d46
-
Filesize
1.4MB
MD52a35a9f934fbfcb96005c9187b1b353a
SHA16a347667157106aeb7b92a42f73a5ce9eddecfdf
SHA25687c70c582efb1e6c0127b695a3774d07980b4190ec34e2f2efdb6f5ff13ef6ef
SHA5126ae4ef9d60f7a2bece3534d1e47ba1877066916d13c6f6abbe305f3f51a9c4b5f2c687426e73caa0a05cccf4471aee8199fd6fcb9b15b15abeba1be96ca5f669
-
Filesize
1.4MB
MD546f98d51abce1a9e994dee7701ea84cd
SHA120aeddd5b905af21d86c48b81e4a7080c28ee5f2
SHA256677b73882b1d587c5c6baa49a3c73b08ddfd94dcb8e14607969b487708a99c02
SHA5123d908b6fd4a97b45335d99b7196adfebdeccacc8c086942cd059dc9aef4f07b5cb038be01100aa55377ffd83e87d1568880859da4789b95e05bf4edba4fefd1b
-
Filesize
1.6MB
MD52529bc962475f021530e885178badb0d
SHA12e39c4569d56c774016fc6d731e39bebda783e67
SHA2566a3012fcae8df7f4170d869b65ed1d3f302f548f93834ce9c88eb25663421f3c
SHA512c9acd96b65533a75a5f716a7f778bdee58369c829341a05d47b6bde8a0820d42109eba2fc9884997b35399cfd61f8d8abe3625218675f1a281b261a04914f3f9
-
Filesize
1.4MB
MD5718e1b7ebfe5818ef617754ae9586d4a
SHA1d18ae6c87cfbeed0dec3270319a6b4629af12cf6
SHA2561a850baf26c10ad18a1f0f133d71dc83ff15f395c194a3390c1096c3587b55f2
SHA512c0a7b8f0d8684bd36d902bec780cf634586a84b3e9f6788213613f5f8d5c0078550d3a1101d8fb477e9c048e92cdd8b7c8ea161291105192c654426f37c909b4
-
Filesize
1.4MB
MD5a20106fce5382b8e9e2d4672b806ba22
SHA1253e334ec5da61ff26b3171af9d3e3bdfd4e320b
SHA256d735485a270319c1126d3d3a1d2732e83e00d4f883b65ce71abdcbbbe10188a2
SHA5128a54421766980476020fd46c09f80641f36468a08b64e137de5fded5e1597d9a35041d07314763a121d3b9911752b45b5050546c31089d49658f432abd3fef10
-
Filesize
1.6MB
MD5f713b82026f5dffbad3bd147f055a0a0
SHA177696900c9e29f1b40cad986f9749c83ab08d861
SHA256dd88e56e3bbf95ae4786d2ad91d9e3678de576d386e2fdd8cd8819b21414706f
SHA5122c218559c9401bc97780cd645994aa15a21b65c9ed03354a62eb9e0c7d99fa5ee54af4515ccf6d63352386756622e3b6050dbb5699b1b99bdb634f327275e452
-
Filesize
1.7MB
MD5b8792242e7c2ac6c6d6202bc5ce1cf35
SHA136f5648d1e85531e9e0ac49e611eddaa89af07f8
SHA256a50353d7ac836295feb7c9245e8520a6829626580ede2e8a4d2821fc762d98fa
SHA5128e1873e0d3f20cefaf9df41207038c22a3fb9cfa7173a9dccc319c5559ac7c5e3b0aa1ce5a53f879a899fc1842fc91ea1671c0831b71306eff1aeefee6b90c24
-
Filesize
1.9MB
MD596b765f576aded938d101f7433c9a40f
SHA136fb412927e09dd1d12da81ad035ac87727c795f
SHA2560513ad5168e37b98ba93277053470cdfd8c4c0ab136d7a5d9fd82456776621cf
SHA51264e5616cdc6e76d42bae94ceeccaff0d35538876395008a1977aa74f9065620c3c9bd9f57ae97b217984868d300c450c8ad701e8d27936258cdf22749b4830b2
-
Filesize
1.4MB
MD5b4b7231277d56a784d7aa7b8d3313a8d
SHA1a2993735e91ba1a4c618f906de9bdcd7150d1699
SHA256eee846f095fa62c9199f75979ada3b1133ba333353435fee04cfb6a988d059bd
SHA512c64707bd85f9f86f127a161f98f2a283b97e7275702794c10dd24b125a52278d0aedc14273ddcb9832492d1384e02ff80d8c5af9e1011cffa62cd73796682888
-
Filesize
1.4MB
MD5cd24695151fc8a2c1ccf6c9298b7e8ce
SHA1e120b2076790c6e3c234b49f4fa90344371d7e9f
SHA25639287d5dde0afecd07f6021b62ae33e00bc03ddd86b02e5e0b63bfdfb2f930e8
SHA512e6bc022ffab22f41b53942138038987fae6daea43c8898ccae2bf3b9ca109df18a7bcfdcbfb02461e1e41541129ea7f352aacf9bb961faa3b301013497d39468
-
Filesize
1.4MB
MD543c46c8c3457918a1ada5adfab3bfa74
SHA14c8b2cc84ccaf06d438f8979e387fde1abe32370
SHA25656dcf6ae36e359dc5d580b801e978baaa6f91d803b239544a05e00b458dbac8f
SHA5126837f19ef2b5dccc3be1c594ead0d17b9b83b7827af36be199293d87ab20f16646e7ba93556999b80651660bc42edcf877b0e571d5896003afb4238a5e60912b
-
Filesize
1.4MB
MD5be20c771442b21d8713eb48bdb4f4457
SHA19d5b98164da13532f4b651ccaa13b2e9ea912e00
SHA256d92fd5fd16dd2cf461d26165c9a47186a753c98ac8fff555ec6431eced709ea3
SHA512443466477e82556689f952b743ba51d54ab86bf9a41112ff33756909068093d9340ca7252f023dca39fc754bb0f89ce77c94d08fc151d6c87f761d9500108f16
-
Filesize
1.4MB
MD5a66d544d2803c213b3ea4fbefd94fea5
SHA1217fcb45ec7dfe37362a6b3ccac122f0d5e69ed1
SHA256e3cbe5cdf5d59deea382dcb8e5cbb2c6bd5fb1800fef71ebef0330020890e3f6
SHA512d389207413f0ab0dddf5983e7065d52ea72e38c0fbed136f64e0a34259bad7b36c52b4b083ba6f110dcec8490393320509ab2aac0c460b531e603f078398382c
-
Filesize
1.4MB
MD5fa48a3f145953bc19c52855e079103c4
SHA13c1b39ba203c49f370c7d185b653e054ad3b898c
SHA256945b571d734b4b65845f5afb4d16bd562689893d998f212015e49aa4a86d9aac
SHA512e0fa002186f45fe9e70b2fbf5a844fb247c3a5460fe7e29527a936dc584a74415fa33dfdd0a7fa6d9aca87620849c9b86a6187484ae0eae4aa164679053b2cfd
-
Filesize
1.4MB
MD5cbfc884c98e9f9f9c1aad7480d0e0a6d
SHA1de353fcad897d44710e5944ac05b25afa306d706
SHA25615b5b3fabfcf58a6ca853ea55776f0954b2d06a3c5daa311fbf431b77825b6ee
SHA5124f4550011086db3d676428b8a6b5337e54223282263f3f95ab8527b0a81c52661490017e16b93eae89319b54df398a7d3e8cddfb6c67cc808373de0d8fb38a10
-
Filesize
1.4MB
MD5ca24710cd81646acc04d307b08f64a8b
SHA189d4ebe14d30b1a465b9e0ede12066e7be6ac938
SHA25617950f3e5f936b525ca2ba43596c0bd50039b5184f38466f8a3c6b3b50c458f7
SHA5120929c36319f1b9ee458802fb89513ea2f227d9a28fc52a996cdd633d8bcfbe1c01c60614c7691fb1245c47ac1b47132e3b43de9ec83a1b08b9ae9fb68fa67caf
-
Filesize
1.4MB
MD532c4b4b3713bc6fd36ef95d884612343
SHA148b1e101bdc75bad4bcb93771b45dc34e09443dd
SHA2567c616a9ecddb49aa81b972dc09d11c1a7ce43de0e80905a56261bcaffdbbdeab
SHA512faf827f5359cb15b93892974c7f2ffc1d51e95b58d36ec2e4105486136684aa09826f7dc3f4d0fe1f5970eb9b5f24c84196323e98ca768e8c1132e2e7afb11d2
-
Filesize
1.4MB
MD53781006c3cbcac0f0b0ce39f3d51453b
SHA1c9781e29588f277ee7658b7d9304c99f23af6874
SHA2562d47f6afd9ff07b2f211c9e2bd696a7d0b680fb25706a0b304aa5534cfb2a392
SHA51241195eba0998f00e69b337aeea8c2c4704bdba3d775f0dc1f7bff720ffec6593da6c902371c2569513410c97c800c375278bf4f5854f3ada98a948cf295e727c
-
Filesize
1.4MB
MD5c3aed25bb6accbec8514b1fe7c281a65
SHA1687b8838a8a493b67d515cb70289718b74094125
SHA2565c185c5fbdf8c952d280f4c101bf5b54a9502ba03fbfdb90372f5a148651f1ce
SHA51200c18580890828f94060387d8c700b44c26ab447a90f9fe14796b1fa2ec36ff76df94ca195e848ec95e7d0d0c1fcd9aff8e68b4e6fe4d8836be561cc48266b7d
-
Filesize
1.4MB
MD56c531396bef2fd2c7d707e2b6258b2a7
SHA14642001d0cec1ed30e71262e4690bc0080f613ae
SHA256dba0dfc26170de5a966ff848a10cd13a7ada03e6a5fc82e8027fed68907f0866
SHA512f1e7789ff6ad88c23404fe02132a718075a8d4af80149e3e6d141a6fd04139e76236e8e269621e48723bffd217ca021f1c5972f4c471f0e650252a3aac22d740
-
Filesize
1.4MB
MD50fd5c8935b78244c485b5c5c7235ef9f
SHA1603669bd07c598c908a7f0c4158fed7934149225
SHA2569737903bdea2e129ebde6cda8705d0418f11ef62cd64c74d592bec4d3a7f1589
SHA512abab304ae6b808ca6cd1655ca2452108961525f616d4eb59a6d84c05c1f820113afdd132930ceeff936e1f8bf3cfc26fdaa15e38f86e37a4b47751b75cca7023
-
Filesize
1.4MB
MD57c323a4152c3213f8699f369713e852b
SHA1dcfb317917dac8893e5d7d684d5dc617079b6f01
SHA256f648edb5669df700527d6fab5b81b7222be3b894b3009940bab6354c73391e50
SHA51288d29d9d3bcad84bb905116dccc7e616fa7b7b71a445c8b2cf138de7e99c92513335586ba24a4897160f6bbb3ca27203ffa577694fffbce27687037dc613ebb2
-
Filesize
1.4MB
MD5ab7fd6e3d0a97f8925f86296e7444164
SHA13d52d170be06edea41c6465503ea70009fc2594f
SHA256a553862d544f1dfbdbfdbb92e424201104711abd567c7f5635d66b39fcb2a0a8
SHA512db8df325b4db0549414842e6175f557008f182777a8cc56f8dc43be88211c94ea031df39890fb8b3179e2792757cbd83ff73dcd9f6c973993bc50f1a147fe455
-
Filesize
1.4MB
MD5e92be10cd5a8432418698774ad2e237a
SHA12eed7ec7f66d1e708c37e2ba43351521e52d4804
SHA2566f43f06ae8ba0b0d3595492d105b1ae99473da72f35f0869f737696d8d61367f
SHA512568c37bdf887390ee600cb10138ec4ae93fdf1034d5b7bf2d73a8fa4c6a6e86c4dd2d9ca31b12310b76e8557c892720ecfb25b7e8e35ab6fb9ebb3dea1164feb
-
Filesize
1.4MB
MD545e2f4f955d0b607fffefcd2b14c2072
SHA1a38ae03745f9560c540c9e263c301d60272e226d
SHA256bf450bfdb58a510716e345b71766d45376b345af9e74e2bfcc4ce7aac8c6198b
SHA51221e9794a63c605b058103e73a65852e2b57f2e4538f3930932121156cbc6c34de2d6f34badbd80f644d731fdb5ea45d9bc9924a02a77343c93dd7007ec571114
-
Filesize
1.4MB
MD5084d0113017bbf0b2990c9374ab8480c
SHA11cbdfc4ef05780b8f809bab47effb610fd6ca4bb
SHA2567572edeba5be15acf73a0f3b6cb1590bb790a36c4832ab75ba74875d171af4f6
SHA51266a67a9d867f19c210a62fabeaff7ebce011f2e1047e3e8752acccef377cfdc425e96922c97dbdd1b3b3b98db217aaac017aabb557db74908c7c6d83214b5bc3
-
Filesize
1.4MB
MD5ad77f6d43421d0a9f7ff77831686490b
SHA12485b3816bfa4843747933a7cb90da625f2b48d1
SHA256a858b0a493e76168eb7051aecc1df365ccfa6a629b2df80bc61096a904280259
SHA512a7d67c563bd65ca7a74eea86e928ba7eee9c1fee43ec6c68fa3bf4d05a7b061315a90d5faeadab994dc234aafdb945a0cd3968c52253a5eee683b9a264467b36
-
Filesize
1.4MB
MD571748c64f7e11256255dccc433b36ad2
SHA11357e4d0fb9c6d863c806547aec631acd997e862
SHA2567cffed1e7817bb3725c0bda78131e9bc02694cc70b57e72be77c1026485a5944
SHA512425e407a07246f230fcb41300d3f496172720184be4207acc250567350715609bc005bc3bbef85707b7ce84a5a722ac181d51610552f73b06a18b9542886da02
-
Filesize
1.4MB
MD52d523abbf791bfa8cb32f7c4d5b734c4
SHA171fe9dbe5671d474aaf33631168ae849b9afd2f4
SHA256974020cc2aa6b4c55d7de3f954eb8e1c67fa486f8d6e7785ebe34682451f9847
SHA51269ad91d40a10defd32db71a44715ef57b47bb847d9b6693a69184f0f20c7aa5b7ea7012e206c800b1bc8d85ca04adc1071cb0787c0357551b6c1d8406e7396bd
-
Filesize
1.4MB
MD5d9f6a1452b6170101c5e51ac6bfb5ba1
SHA17f029d4f96b5ae26e2fa3a9834b562692cb32ce8
SHA25696bcd5da8c5a3e0cabd7d1272a8f4df511f2695e70c2e9c2cf484861c7da6ea9
SHA5127298aaaf21a93d5d31e9a5402cbc1a7cdd019b1db1fbe2e2f53dc5459cd4d99d9b8f88a9157449731b41c56dc785b16cc70dbd2bd70b5938e7f0fc740c391ac9
-
Filesize
1.4MB
MD5589e0df53a888f671a57405a85ec3e25
SHA185094d57c45aa85cbef90808e449f65a3ee2e7e6
SHA256e4d4362028df6e93b841c03a813ada19d1edd6747dfcc44601c87167b28774bd
SHA5125d7c67d3a47c6d86f60d0b22ef874892be5bc9adee030cce6b9c99be7d39f614bf91abebd43bd000075d88127e72f6d0649142b5eef2fe78643fdfa860a1bf3b
-
Filesize
1.6MB
MD56b8da00d4a0b246f5c3b66a198c92a0b
SHA188aa3ff78dfc3bee67983cf62f0de320c5595f0e
SHA256ec671ed69332eb9767d6c3181d603a89903dcbd82469269d47c7e24bd15adae0
SHA512f1f60982c530b423da6a9acf455b1a09be8ddd3327704559ffdc615237118d416ab7747af35c7d7ae947d28d7d353c7239df0beedd10bd49271db4494eb412ad
-
Filesize
1.5MB
MD554bf3c39838e1b4660d4eca0a5f12d17
SHA1b8bc8cd550af71612dd68765489038dfe586b29a
SHA25654611c093eed0b53b1dbed282f78b5179b96ffbd0740d845f007c5f3e6e60e2e
SHA51234534859b2329a84b97e1a691e0cd53953b9643833f745583d041f712e37989dfc9983d7242dc3731c821ba4dea553a3f85b864b0bd6e5248f9abbd15619a716
-
Filesize
1.5MB
MD53dd8fe7d8ba280332f0047f644021911
SHA19225e90d5672d47c05271e4212e9f63d1333b590
SHA256291aa59e5c4f9c209979e204ca50a7c2c5d115b28dd4aa93f3f091793f16e10d
SHA512b470e37a3afad36f71ad3e69c028317cbf493423ada3f543d58993c46566f4cdf72cf7a54f7b6fceb61f3c72403524129b6d33ce001b0db4122c6c8612bd83a2
-
Filesize
1.3MB
MD542506aa8c1440e6e409356812f1e457e
SHA1d761911f756296fddc1572465dbfb27fe22e0f87
SHA2563e6dd5a32bb043c4628c026468535121e0cc7175787da3d0ea2f7fdcf8773440
SHA512bd5cdd99d42865a073354acb42d3217f245bef2e2463fac4086792fe9c3ab5f8e59aecc298f8c45d2cf8fbf9a288bb55b8891533317dfff1f14e2a0bb88c7d34